Privacy Policy for the Kennzeichen Wiki App

Preamble: Our Commitment to Privacy

The protection of your data is our highest priority. The Kennzeichen app was developed according to the "Privacy by Design" principle, which means that data protection was integrated into the app's architecture from the very beginning. We guarantee that no personal data will be transmitted to third parties without your consent.

All core functions of the app are executed locally on your device. On Apple devices (iPhone/iPad), optional synchronization via iCloud is available, which only works when iCloud is enabled and remains limited to your own Apple devices. The optional features "Shared Collections" and "Leaderboard" use external servers (Supabase), but process your data anonymously and encrypted.

Principle of Local Data Processing

• Local Storage: Favorites, seen license plates, and settings are fundamentally stored locally on your device.
• Optional iCloud Synchronization (Apple devices only): When iCloud is enabled on iPhone/iPad, encrypted synchronization occurs between your Apple devices via Apple servers. Android devices do not use iCloud synchronization.
• Optional Features with External Processing: The features "Shared Collections" and "Leaderboard" use the external platform Supabase, but process data anonymously.
• No Tracking Mechanisms: The app contains no analytics tools or third-party tracking functions.
• No Advertising: No advertising networks are integrated.
• Full Control: You have complete control over your data at all times.

1. Controller

Yannick Lung
Am Markt 6
40764 Langenfeld (Rhld.)
Germany
Email: hello [at] mail.kennzeichen.wiki

2. Types of Data Processed

2.1 Data Processed Locally and via iCloud (iCloud only on Apple devices)

• Location data (only during active use and with consent)
• Locally stored user preferences (favorites and seen license plates)
• Data synchronized via iCloud on Apple devices (favorites and seen license plates)
• Technical usage data (device type, operating system version)

Note: Android devices do not use iCloud synchronization. All data is stored exclusively locally.

2.2 Data for Optional Features (Supabase)

When activating the optional features "Shared Collections" or "Leaderboard," the following data is processed via the Supabase platform:

Shared Collections:

• Device ID (anonymized UUID identifier)
• Device name (e.g., "Max's iPhone" or "iPad")
• Device model (e.g., "iPhone14,2")
• Collection data (license plate IDs, favorite status, seen status, date)
• Group ID (for synchronization within a group)
• Optional location data of seen license plates (if you provide this when marking)

Leaderboard:

• Username (freely chosen by you, e.g., "Max123")
• User ID (anonymized identifier in the format "U-XXX-YYY")
• Score (based on seen license plates)
• Profile picture (optional, uploaded by you)
• Friend relationships (user IDs of friends)
• Timestamps (creation and update dates)

2.3 Data for Map Function (Mapbox - Android only)

In the Android version, the Mapbox service is used for map display. The following data may be transmitted to Mapbox:

• IP address
• Device type and operating system version
• Map section and zoom level
• Location data (only if you have granted location permission)

Data processing by Mapbox is governed by their privacy policy: https://www.mapbox.com/legal/privacy

2.4 Data for Support Contact

Via Email:

• Your email address
• The support message you wrote
• Optional technical information you provide in the email (e.g., device model, iOS/Android version)

Via WhatsApp:

If you use the WhatsApp contact function for support requests or bug reports, the following data is processed:

• Your phone number (only for WhatsApp, not automatically transmitted to us)
• The support message you wrote
• Automatically inserted technical information:
  • App version and build number
  • iOS/Android version
  • Device model (e.g., "iPhone 13")
  • Affected license plate (code and city)

Communication occurs via WhatsApp/Meta according to their privacy policy: https://www.whatsapp.com/legal/privacy-policy

Important: For both contact methods, we only receive the information you actively send. With WhatsApp, your phone number is only shown to us when you send us a message (like any WhatsApp chat). Both functions are purely alternatives for contacting us.

3. Purpose of Data Processing

3.1 Location Data

• Display of your own location on the map
• Calculation of distance to displayed license plates
• Optional marking of the location where you saw a license plate
• Location data is processed exclusively temporarily during active use
• Location data is only saved if you explicitly add the location when marking a seen license plate

3.2 Local Data Storage and iCloud Synchronization (Apple devices only)

• Storage of favorite license plates
• Recording of seen license plates
• Storage of user settings
• Optional synchronization via iCloud between the user's own Apple devices (iPhone/iPad)

Note: On Android devices, no iCloud synchronization occurs. All data is stored exclusively locally on the device.

3.3 Shared Collections (Supabase)

• Synchronization of collection data between multiple users in a group
• Real-time updates when changes are made by group members
• Identification of devices within a group
• Management of group memberships

3.4 Leaderboard (Supabase)

• Display of leaderboards and comparison with friends
• Management of friend requests
• Display of profiles with names and optional profile pictures
• Calculation and synchronization of scores

3.5 Map Display (Mapbox - Android only)

• Display of license plates on an interactive map
• Navigation and zoom functions
• Provision of map material

3.6 Support Contact (Email & WhatsApp)

• Enabling contact with the developer for support requests
• Provision of two contact alternatives (email and WhatsApp)
• Transmission of technical information for error diagnosis (automatic with WhatsApp, optional with email)
• Processing and answering your support requests

4. Legal Basis

• Processing of location data is based on the explicit consent of the user (Art. 6 para. 1 lit. a GDPR).
• Local data storage is for the fulfillment of the contractual purpose (Art. 6 para. 1 lit. b GDPR).
• Optional iCloud synchronization on Apple devices is based on your consent by activating iCloud (Art. 6 para. 1 lit. a GDPR).
• Use of the optional features "Shared Collections" and "Leaderboard" is based on your explicit consent (Art. 6 para. 1 lit. a GDPR).
• Data processing by Mapbox and WhatsApp is based on your consent when using these services (Art. 6 para. 1 lit. a GDPR).

5. Data Recipients and Data Transfer

5.1 Apple (iCloud - Apple devices only)

• Provider: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
• Purpose: Synchronization of your app data between your own Apple devices
• Processing: Apple acts as a data processor according to Art. 28 GDPR
• Encryption: End-to-end encrypted - Apple has no access to the contents of your synchronized data
• Server Locations: Worldwide, with focus on the USA and Europe
• Legal Basis: Your consent by activating iCloud (Art. 6 para. 1 lit. a GDPR)
• Privacy Policy: https://www.apple.com/legal/privacy/
• Important: You can disable iCloud for this app at any time in iOS/iPadOS settings

5.2 Supabase (Shared Collections & Leaderboard)

• Provider: Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992
• Purpose: Provision of backend infrastructure for optional social features
• Server Location: Selectable during project creation. For this app, the region "Central Europe (Zurich, Switzerland)" on AWS infrastructure was chosen.
• Data Residency: Data remains in the selected region (Zurich) and is not automatically replicated to other regions
• Data Transfer: Encrypted HTTPS connection (TLS 1.3)
• Legal Basis: Switzerland has an adequacy decision from the EU Commission (Art. 45 GDPR), ensuring an adequate level of data protection. Processing is based on your consent (Art. 6 para. 1 lit. a GDPR)
• Verification: You can view your project's region in the Supabase Dashboard under "Project Settings → Infrastructure"
• Privacy Policy: https://supabase.com/privacy
• Important: Use is optional and only occurs after your explicit activation of these features

5.3 Mapbox (Map Display - Android only)

• Provider: Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, DC 20005, USA
• Purpose: Provision of map material and geolocation services for the map function in the Android app
• Data Transfer: Data is transmitted to Mapbox servers in the USA with each use of the map function
• Transmitted Data: IP address, device type, map section, zoom level, optional location data (if location permission is enabled)
• Third Country Transfer: Yes, transfer of personal data to the USA
• Legal Basis: Your consent through active use of the map function according to Art. 6 para. 1 lit. a in conjunction with Art. 49 para. 1 lit. a GDPR
• Risk: In the USA, there may not be an adequate level of data protection compared to the EU. By giving your consent, you accept this risk.
• Privacy Policy: https://www.mapbox.com/legal/privacy
• Alternative: The map function is optional. You can use the app without using the map.

5.4 Email Communication (Support Contact)

• Processing: Emails are sent via your email provider and received by us
• Purpose: Processing of support requests, bug reports, and general communication
• Stored Data: Email address, message content, timestamp
• Retention Period: Support emails are stored until your request is fully processed, then maximum 6 months for follow-up questions
• Legal Basis: Legitimate interest in processing your request (Art. 6 para. 1 lit. f GDPR) or contract fulfillment (Art. 6 para. 1 lit. b GDPR)
• Contact Address: hello [at] mail.kennzeichen.wiki

5.5 WhatsApp/Meta (Support Contact)

• Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
• Purpose: Enabling support communication with the developer
• Data Transfer: Occurs directly between you and WhatsApp as well as between you and the developer via WhatsApp
• Type of Communication: Pure alternative to email for support requests and bug reports
• Transmitted Data: Your message, technical app information (version, device, system), affected license plate
• Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

6. Retention Period

6.1 Local and iCloud (Apple devices only)

• Location data: Only temporarily during active use (not stored, unless you explicitly mark a location when marking as seen)
• Stored location data of seen license plates: Until manual deletion or uninstallation
• Favorites and seen license plates: Until app uninstallation or manual deletion
• iCloud-synchronized data (Apple only): Until uninstallation on all Apple devices or deactivation of iCloud synchronization
• Settings: Until app uninstallation or manual deletion

6.2 Supabase (Shared Collections)

• Collection data: Until leaving the group or manual deletion
• Group data: Until dissolution of the group by all members
• Device information: Until leaving the group

6.3 Supabase (Leaderboard)

• Profile data: Until manual deletion of your account
• Profile pictures: Until manual deletion or update
• Friend data: Until manual removal of friendship or account deletion
• Scores: Continuously updated until account deletion

6.4 Support Communication

• Email requests: Until fully processed, then maximum 6 months for potential follow-up questions
• WhatsApp messages: According to WhatsApp privacy policy; in our communication until processing of your request

6.5 Mapbox and WhatsApp

For the retention period of data at Mapbox and WhatsApp, the respective privacy policies of these services apply.

7. Your Rights as a Data Subject

You have the following rights:

• Access (Art. 15 GDPR): You can request information about the processed data
• Rectification (Art. 16 GDPR): You can request the correction of incorrect data
• Erasure (Art. 17 GDPR): You can request the deletion of your data
  • Local data: By uninstalling the app or manual deletion in settings
  • iCloud data (Apple devices only): By deactivating iCloud synchronization and deleting app data in iCloud settings
  • Leaderboard profile: Through the "Delete account" function in leaderboard settings
  • Shared Collections: By leaving the group in app settings
• Restriction of processing (Art. 18 GDPR): You can request restriction of processing
• Data portability (Art. 20 GDPR): You can receive your data in a structured, common format
• Objection (Art. 21 GDPR): You can object to processing
• Withdrawal of consent (Art. 7 para. 3 GDPR): You can withdraw your consent at any time
  • Location permission: In iOS/Android system settings
  • Shared Collections: By deactivation in app settings
  • Leaderboard: By deactivation or account deletion
• Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority

Competent Supervisory Authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Germany
Email: poststelle@ldi.nrw.de

8. Technical Security Measures

8.1 Local Processing

• Encrypted local data storage through iOS/Android
• No transmission of personal data to external servers (except for optional features)
• Location data is only processed during active use and with consent

8.2 iCloud Synchronization

• End-to-end encrypted synchronization via iCloud
• Transfer only via secure HTTPS connections
• Synchronization only between own devices with the same Apple ID

8.3 Supabase Communication

• Encrypted HTTPS connections (TLS 1.3)
• Anonymized user IDs (no directly identifying data)
• Row Level Security (RLS) at database level - users can only see their own data and that of their groups/friends
• Regular security updates of the infrastructure
• Server in Switzerland (Zurich) with EU adequacy decision for optimal data protection level

8.4 Mapbox Communication (Android)

• Encrypted HTTPS connections
• Minimization of transmitted data (only necessary map information)

9. Data Security for Optional Features

9.1 Shared Collections

• Pseudonymization: Instead of personal data, an automatically generated device ID (UUID) is used
• Group-based access control: Data is only visible to members of the respective group
• Invitation-based system: Only people with an invitation link can join a group
• Leave at any time: You can leave groups at any time, your data will then be removed from the group

9.2 Leaderboard

• Voluntary participation: Leaderboard is completely optional
• Free choice of name: You can choose any display name (does not have to be your real name)
• Friend system: Only people you add as friends can see your details
• Anonymized ID: Your user ID is a random code (e.g., "U-123-ABC"), not personal information
• Optional profile picture: Profile picture is completely optional
• Deletion function: You can completely delete your account at any time

10. Offline Functionality

The app was deliberately designed to function fundamentally offline. After the initial download of the app:

• All license plate data is stored locally
• All calculations are performed locally
• All user preferences are stored locally
• On Apple devices: Optional synchronization via iCloud exclusively between own Apple devices
• Location data is only processed temporarily and exclusively in the device's RAM

Note: The optional features "Shared Collections", "Leaderboard", and "Map Display" (Android) require an internet connection.

11. Transparency about Data Flows

11.1 Fully Offline Usable Functions:

• Browsing all license plates
• Marking favorites and seen license plates (locally)
• Statistics and evaluations
• Filtering and sorting

11.2 Functions with iCloud Synchronization (Apple devices only, optional):

• Synchronization of favorites between own Apple devices (iPhone/iPad)
• Synchronization of seen license plates between own Apple devices
• Synchronization of settings between own Apple devices

Note: This function is only available on Apple devices. Android devices do not use iCloud synchronization.

11.3 Functions with External Data Processing (optional):

• Shared Collections: Requires Supabase connection
• Leaderboard: Requires Supabase connection
• Map Display (Android): Requires Mapbox connection
• Support Contact: Via email (hello@mail.kennzeichen.wiki) or WhatsApp - both optional

11.4 Principle of Data Minimization

According to Art. 5 para. 1 lit. c GDPR, we only collect and process data that is absolutely necessary for the respective function:

• Shared Collections: No email addresses or real names required - only anonymized device IDs
• Leaderboard: Free choice of name (pseudonyms possible) - no real name required, profile picture optional
• Location Data: Only temporarily during active use, no permanent storage without explicit marking
• No Tracking IDs: No advertising IDs, no analytics tools, no behavior analysis
• No Cookies: As a native app, we do not use cookies or similar tracking technologies

12. Special Notes for Children

This app is suitable for users of all ages. We do not knowingly process personal data of children under 13 years of age without parental consent. The optional features "Shared Collections" and "Leaderboard" should only be used by children under parental supervision.

13. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy as necessary in compliance with applicable data protection regulations. The current version is displayed in the app and is available via the website kennzeichen.wiki.

In case of significant changes, we will inform you in the app.

14. Contact and Exercise of Your Rights

For questions about data protection, to exercise your rights, or for complaints, you can contact us at any time:

Email: hello [at] mail.kennzeichen.wiki
Post: Yannick Lung, Am Markt 6, 40764 Langenfeld (Rhld.), Germany

We will respond to your request within 30 days.

Last updated: December 2025

← Back to Homepage